What could be done with web shell on unrooted android device?

Question

Is it possible to control unrooted android device through a web shell?

I've been trying to execute various php shells but the whole response is error statements like this

php is installed and all other php pages works fine
The tested php shells works fine on another controlled systems

What do you mean by"control"? Are you aware of the security separations in Android? — schroeder, Feb 18 '18 at 18:29
I mean: to be able to execute and use the shell properly without any errors — , Feb 18 '18 at 18:50
So you don't want to control the unrooted Android device, you want to "control" the shell? — Tom K., Feb 19 '18 at 08:12
Yeah, But if I'm able to control the shell I must be able to control the device — , Feb 19 '18 at 17:40

score 0 · Accepted Answer · answered Feb 22 '18 at 11:59

If the web server such as Palapa Web Server is installed on the Android device and the Android device is capable to execute PHP scripts then you can definately get the shell access of the device.

Note: Android supports a beautiful and the robust concept of sandboxing such that each application runs as different user. Once you will get the shell access on the device you will get the privelleges of the application that is executing the webshell.

What could be done with web shell on unrooted android device?

1 Answers1